JP2003150263A - Accounting system for software - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize the quantity used-base charging of software. SOLUTION: This system is constituted of a use permitting device for permitting the use of a software storage medium in which an enciphered program or data (software) are registered and a control center communicatively connected to the use permitting device for performing the setting of an available quantity and the totaling and charging of the quantity used. The use permitting device is provided with a clock for acquiring data information, a use permission processing part having a date information storing means for storing the acquired date information until acquiring the next date information, and a quantity used managing part for counting the use quantity used of the software of an end user, and the quantity used of the software is managed by the number of dates by the use permission processing part.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technique effective when applied to a distribution system of software such as a computer program or a video work, in particular, digitalized software.

[0002]

2. Description of the Related Art A large-scale storage medium such as a CD-ROM or B
With the development of large-capacity high-speed communication technology such as ISDN, it is expected that not only computer programs but also images and sounds will be distributed as digital information using these means.

That is, a video work that has been conventionally supplied on a video tape is directly stored in a CD-ROM for sale, or a game utilizing the interactivity (bidirectionality) of the CD-ROM is put on the market. It has begun to be distributed.

The same applies to communication lines, and the above-mentioned image copyrighted work is now being delivered to the user's hand via communication. By the way, this kind of digital information is extremely easy to copy to other media,
In addition, since there is no deterioration due to copying such as analog information, it is possible to copy the same information, and it is very likely that the profit of the manufacturer will be damaged by these acts. That is, it is easy to copy the contents of the CD-ROM with only a little knowledge of the command of the DOS if a large-capacity rewritable magneto-optical disk or a magnetic disk device is owned.

As described above, in most cases, the manufacturer prohibits the rental of digital information media of this type because a sufficient security check cannot be performed.

However, as the end user, the price of this kind of software at present is expensive, and whether the software really matches what he wants,
Or, he often hesitates to purchase until he can confirm that it can be used with his own hardware.

Regarding this point, a large number of software whose functions are limited are stored in a CD-ROM and sold at a low price, and the end user sends a payment for the desired software to limit the functions. A new software distribution method is being realized in which the code to be released is notified.

[0008]

[Patent Document 1] Japanese Patent Publication No. 6-19707 (No. 2-7)
Page, Fig. 2-5)

[0009]

However, the above-mentioned software distribution method cannot be said to sufficiently reflect the characteristics of the software.

In other words, in the method of releasing the above-mentioned function restriction, most of the money is sent in a lump sum, and the money is inevitably high. For example, I want to see a little scene of a movie. For example, if you want to use spreadsheet software for only one week, it is difficult to manage the charge according to the usage amount.

Regarding this point, in Japanese Patent Publication No. 6-19707, the usable amount of money is registered in the IC card in advance, and when the paid software is used, the usable amount of the IC card is registered in the system. Has proposed a method of subtracting the balance each time the software is used.

The present invention is a step further than these prior arts, and provides a technology for concretely realizing the pay-per-use billing of software.

[0013]

In order to achieve the above object, according to the present invention, firstly, as shown in FIG. 1, software (program or data) protected to prevent unauthorized use. Permission device that permits the use of Internet (301)
And a management center (31) for setting the usage balance of the usage permitting device (301).
In (01), a clock (302) that acquires date and time information, a date and time information storage unit (303) that stores the acquired date and time information until the time of acquisition of the next date and time information, and a usage permission signal in response to a usage request. A usage permission processing unit (304) for generating and a usage amount management unit (305) for counting the usage amount of the end user's software are provided so that the usage amount of the software is managed by the usage permission device in days. I chose

Secondly, the date / time information storage means is provided for each piece of software permitted to be used by the management center. Thirdly, the usage permitting device monitors the usage of the software, and if the date and time of the usage is different from the date stored in the date and time information storage means, it is judged as a new usage and the usage balance. I decided to update.

Fourthly, the use permission device monitors the use of the software, and when the date and time of the use is different from the date and time information stored in the date and time information storage means by a predetermined time or more. Only the new usage is judged and the usage balance is updated.

Fifth, the clock information is calibrated only by the time calibration command from the management center. Sixth, a key storage means for storing key information unique to the device and a non-repeated number storage means for storing a non-repeated number for preventing reuse of commands are provided in the use-permitted device.
The management center concatenates the non-repeated number with the time calibration command, encrypts the non-repeated number with the key information, and transmits the encrypted data to the usage permitting device. Decoding the time calibration command and the non-repeating number using the read key information,
The received non-repetition number is compared with the value stored in the non-repetition number storage means, and the clock is calibrated based on the received time calibration command only when the comparison result is correct.

Seventh, the date / time information storage means can set an arbitrary date by a date information setting command from a management center, and the use permission processing unit reads out the date / time information from the clock when using software. Is compared with the value stored in the date / time information storage means, and only when the value is smaller than this value, the software is permitted to be used, so that the software use period can be limited.

Eighth, a key storing means for storing key information unique to the apparatus and a non-repeating number storing means for storing a non-repeating number for preventing reuse of the command are provided in the use-permitted device. The management center concatenates the non-repeating number with the date information setting command, encrypts the non-repeating number with the key information, and transmits the encrypted data to the usage permitting device. When the date information setting command and the non-repeating number are decrypted by using the read key information, the received non-repeating number is compared with the value stored in the non-repeating number storing means, and the comparison result is correct. The date information is set in the date / time information storage means based on the date information setting command received only by the.

Ninth, the usage amount management unit is provided with a credit balance storage means which is set for each software and whose stored value is set / updated by a credit balance setting command from the center. When the usage balance is set, the software provider can be aggregated.

Tenth, the setting of the secret key is performed simultaneously with the setting of the credit balance. 11th
In the use-permitted device, a key storage means for storing device-specific key information and a non-repeated number storage means for storing a non-repeated number for preventing reuse of commands are provided. The credit setting command is concatenated with the non-repeating number, encrypted by the key information and transmitted to the usage permitting device, and the usage permitting device receiving this uses the key information read from the key storage means. The credit setting command and the non-repeating number, the received non-repeating number is compared with the value stored in the non-repeating number storing means, and the credit setting command is received only when the comparison result is correct. Based on the above, the credit balance is set in the credit balance storage means.

Twelfthly, the usage amount management unit is provided with a credit balance storage means shared by a plurality of software, and further has a plurality of secret key storage means for storing a secret key corresponding to a center. By enabling the use key to be encrypted with the secret key and added to the software, a plurality of / single centers can be supported.

Thirteenth, the secret key is set at the same time as the credit balance is set. 14th
In addition, the use price, which is subtracted from the credit for each use together with the use key, is encrypted with the secret key and added to the software.

Fifteenthly, the usage record is provided with a usage amount recording section registered for each software. Sixteenth,
A key storage means for storing device-specific key information is provided in the use-permitted device, and the management center encrypts a key corresponding to the center with the device-specific key and transmits the encrypted key to the use-permitted device. Upon receipt of the above, the use permission device decrypts the key information read from the key storage means and sets it in the secret key storage means of the corresponding center.

Seventeenth, the usage permitting device is provided with a key storing means for storing device-specific key information and a non-repeating number storing means for storing a non-repeating number for preventing reuse of commands. The management center concatenates the non-repeating number to the credit setting command, encrypts the non-repeating number with the key information, transmits the encrypted non-repeated number to the usage permitting device, and the usage permitting device having received this reads it from the key storage means. Only when the result of comparison is correct, the credit setting command and the non-repeating number are decrypted using the key information, and the received non-repeating number is compared with the value stored in the non-repeating number storing means. The credit balance is set in the credit balance storage means based on the received credit setting command.

Eighteenth, the usage amount management unit is provided with a usage amount integrator which is set for each software and which counts the integrated amount of usage amount of the software, and the usage permission processing unit,
The usage amount integrator is monitored, and when the usage of the software exceeds a certain amount, the management center is notified.

Nineteenth, when the end user desires to change from the pay-as-you-go billing system to the sold-out system, the usage permission unit notifies the management center of the value of the usage amount integrator, and the management center receives the notification. Based on the accumulated amount, a part or all of the amount already paid as a pay-as-you-go bill is reduced from the price when sold out.

[0027] Twentieth, the usage amount integrator has a system change value storage means for registering an integrated value of the software, which is changed from a pay-per-use system to a sold-out system,
When the integrated amount exceeds the integrated value registered in the system change value storage means, the system is changed from the pay-per-use charge to the sold-out only within the usage permitting device.

Twenty-first, a serial number is used as the non-repeating number, a command using the non-repeating number is received, and if the comparison result is correct, the serial number is updated.

Twenty-second, the center manages the serial number so that the management center is not notified of the serial number before sending a command. Twenty-third, a time stamp is used as the non-repeating number, and a clock and time stamp storing means are provided.

Twenty-fourth, a random number is used instead of the non-repeating number, and a random number generating circuit and a random number storing means are provided. Twenty-fifth, the signature is used instead of the command encryption using the non-repeating number or the random number.

(Operation) According to the first means of the present invention, by providing the date / time information storage means, it is possible to manage the pay-as-you-go billing of software by the number of days, and the end user can feel the same as rental video etc. With, you can play the software at home.

According to the second means, by setting the date / time information storage means for each software, even when the end user reproduces a plurality of software, the number of days for each software can be changed. Charges can be managed.

According to the third means, the usage balance can be reduced by referring to the date / time information storage means when the usage permission processing section monitors the usage of the software. According to the fourth means, it is possible to prevent the inconvenience that a charge for two days is charged simply because the date is changed for the use of the software last time without much time difference.

According to the fifth means, by calibrating the clock only by the time calibration command from the management center, the objective time management in the software reproducing device is realized and the end user is illicit. By performing the time calibration, it is possible to prevent the stored value of the date / time information storage means from being illegally operated and the software from being illegally used.

According to the sixth means, the time calibration command from the management center is concatenated with the non-repeated number and is received in the licensed device in encrypted form based on the key information. Since it is difficult to modify the time calibration command, it is possible to improve the security of billing management.

According to the seventh means, by providing the date / time information storage means, it becomes possible to limit the software use period. According to the eighth means, the date and time information setting command from the management center is concatenated with the non-repeating number and is received in the licensed device in an encrypted form based on the key information. It is difficult to revise the time calibration command, and the security of billing management can be improved.

According to the ninth means, by setting the credit balance storage means for each software, it becomes possible to distribute to the software provider when setting credits. According to the tenth means, the credit balance and the usage key can be set with one command, and the number of times of communication can be reduced.

According to the eleventh means, it is possible to prevent the credit balance from being fraudulent by concatenating and encrypting the non-repeating number when setting / updating the credit. According to the twelfth means, when a plurality of centers are present, it is possible to handle with one use permission device.

According to the thirteenth means, the setting of the credit and the setting of the secret key can be performed by one command, and the number of times of communication can be reduced. According to the fourteenth means, it becomes possible to use software having different usage charges without communication with the management center, and the charge management in the usage permission device becomes easy.

According to the fifteenth means, data for software distribution can be obtained for each software, and even when a plurality of providers provide the software, a fair charge can be obtained. Can be distributed.

According to the sixteenth means, it is possible to prevent leakage of secret information when setting the secret key corresponding to the center.
According to the seventeenth means, it is possible to prevent the tampering of the credit end user.

According to the eighteenth means, it is possible to adopt a service system in which a certain amount of software is used to receive preferential treatment. According to the nineteenth means, when the end user who originally used the pay-per-use system for software for which both the pay-per-use system and the sold-out system are easily purchased, purchases the software halfway,
The amount already paid as the pay-as-you-go bill can be reduced from the purchase price.

According to the twentieth means, if the software is used for a fixed amount of pay-per-use, the purchase can be changed without communication with the management center. According to the twenty-first means, by using the serial number as the non-repeated number, different encryption can be performed every time, and the security can be improved.

According to the twenty-second means, by managing the serial numbers by the management center, the procedure of notifying the center of the serial numbers can be omitted, and the burden on the protocol can be reduced. Second
According to the means of 3, the use permitting device having the built-in clock can be realized without increasing the number of circuits by using the time stamp.

According to the twenty-fourth means, different encryption can be performed every time by using a random number, and it is possible to prevent fraud of the end user. According to the twenty-fifth means, by using the signature, it is possible to maintain security while disclosing necessary information to the end user.

[0046]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS (Embodiment 1) FIG. 2 shows a usage permission device 301 (here, a software playback device 105) of the present invention.
Is incorporated in the above).
(Structure of Software Reproducing Device) The software management module 10 in which the portion (SD circuit 3) surrounded by the broken line shown in the figure substantially constitutes the usage permitting device 301 of the present invention.
It is 2. This software management module 102
It may be fixedly mounted in the software reproducing device in the form of a board or a card,
Card slot of software player (eg PC
It may be an IC card detachably mounted in an MCIA-compliant card slot).

In the figure, 1 is a demodulation circuit / control circuit,
It has a function of demodulating the MPEG standard image / sound information stored in the CD-ROM and sending it to the decoder 2. The decoder 2 executes error correction and bit rearrangement to a maximum of 2 megabytes / second (average 1 megabyte / second).
Image / sound information (cipher information) of the second) is transferred to the SD circuit 3.

In the software management module 102, that is, the SD circuit 3, the image / voice information (encryption information) received through the I / O (5: input unit 104) is used as a DES (Data Encryption Standard) 7 as a decryption unit 103.
Is decoded and sent to the demultiplexer 13 outside the SD circuit 3 through the I / O (6: output unit 109). In addition, DE
S7 is, for example, "46 DATA ENCRYPPTION" made by FIPS 'PUB.
A chip called "STANDARD NIST" can be used.

The demultiplexer 13 separates the audio data and the image data into an MPEG processing unit (MPEG-
Output to 2). The MPEG processing unit (MPEG-2)
It has the function of decompressing the data-compressed MPEG standard image / audio information. For example, "ISO / IEC CD 13818'1"
~ 3 "standard chips can be used.

When the voice and the image are separated and output, the synchronization between the image data and the voice data is adjusted by the synchronization controller (VRC). When the output destination is a computer (PC), the MPEG data is kept as digital information, and when the output destination is a TV monitor or a speaker, it is output as analog information after D / A conversion. .

Note that the output to the TV monitor and the speaker is such that the exchange of such information is controlled by the control CPU 10 and the SD circuit 3 in the software reproducing device 105 as a permission control unit.
The control CPU 10 in the SD circuit 3 may share the control CPU 4 in the SD circuit 3.

Although the case where the software is encrypted has been described, the routine for authenticating the software may be incorporated to perform the authentication for use. (Functions in SD Circuit) In the SD circuit 3, the control CPU 4 functions as the permission control unit 108, and determines whether to permit the DES 7 to decrypt the encrypted software data read from the CD-ROM 101. .

At the time of this determination, the control CPU 4 refers to the billing table (credit balance register) set in the memory 8 and executes the decryption by the DES 7 only when the billing balance is on the table.

That is, a predetermined balance value is registered in the memory 8, and the charge value is subtracted according to the decryption processing amount or processing time of the encrypted software data. When it is desired to update the balance value, the balance value in the charging table (credit balance register) of the memory 8 can be increased by communicating with the management center.

In FIG. 2, the usage permission processing unit 304 and the usage amount management unit 305 described with reference to FIG. 1 are realized by the control CPU 4 and the memory. Although not shown in FIG. 2, the clock 302 is realized by, for example, a real-time clock LSI and a battery.

In this embodiment, the date / time information storage register 303 (date / time information storage means) is also set in the memory.
FIG. 5 is a functional block diagram of the first embodiment.

The use permission device 301 includes a clock 302, a date / time information storage register 303, and a use permission processing unit 304.
A usage amount management unit 305 and a key serial number storage register 306
(Key serial number storage means) and credit balance register 308
It consists of and.

The date / time information storage register 303 is the SD of FIG.
It is set in the memory 8 in the circuit 3, and the date and time when the software is reproduced is recorded under the control of the control CPU 4.

The usage permission processing unit 304 and the usage amount management unit 305 are specifically realized by the control CPU 4. The key serial number storage register 306 stores key information unique to the apparatus and serial number information (numerical value of this serial number information is incremented) encrypted.

The credit balance register 308 is set as a billing table on the memory 8 of FIG. 2, and the billing balance is subtracted according to the use of software.

Next, the use permission flow of this embodiment will be described with reference to FIG. (Description of Usage Permission Flow) First, when the usage permission processing unit 304 receives a usage permission request from software (3001), it reads the value of the date / time information storage register corresponding to the software for which the usage request has been issued (3).
002). Here, the date / time information storage register may be a single one, or may be set for each software. It may be set for each group of specific software.

Next, the current time is read from the clock 302 (3003). Next, the date and time information from the date and time information storage register and the current time information obtained from the clock 302 are compared to determine whether or not the date and time satisfies the condition (3
004). Here, whether or not the date and time satisfies the conditions is based on the following criteria. Which of the criteria described below (a combination of several criteria may be used) is set by the soft air provider. (1). That is, if the dates are the same, that is, in the present embodiment, the pay-per-use charge for software reproduction is executed on a date basis instead of an hour basis. That is, the date stored in the date / time information storage register 303 is the clock 3
If the date is before the date obtained from 02,
A predetermined usage fee is reduced from the credit balance register 308 for the use of new software (300
8). (2). If there is a time difference of more than a certain amount, or if the fee is charged on a day-to-day basis, for example, when the software is used at 11:50 the night before and the software is used again at 12:10 the next day, Even if the software is reused at intervals of 20 minutes, the charge for 2 days will be charged.

Therefore, even if the use is made on a different date in (1), if the use is made with a slight time difference, the use is immediately permitted as an affirmative branch of step 304 (3005). For example, the time difference is set to 12 hours.

As described above, when the conditions are satisfied in step 3004, a positive branch is made to permit use without charging (3005). Based on this usage permission, the DES 7 in the SD circuit 3 sequentially decodes the software and outputs it.

On the other hand, when the process proceeds to the negative branch in step 3004, the usage amount management unit 305 accesses the credit balance register 308 to check the usage balance (3
006). Here, if the balance is equal to or more than a certain amount, that is, if the usage amount to be deducted this time remains, the balance is updated (3008). This update of the balance specifically means subtraction of the balance value stored in the credit balance register 308.

When the balance is insufficient in step 3006, it is determined that the balance cannot be used and the software decryption is rejected (3005). Next, the usage permission processing unit 304
The date and time information read from the clock 302 is set in the date and time information storage register 303 (3009). By this processing, the current usage time (usage start time) of the software is stored. (Method of Time Calibration from Management Center) Next, the procedure of time calibration from the management center 31 to the software reproducing apparatus (usage apparatus 301) will be described with reference to FIG.

As shown in FIG. 5, the time permitting message 307 (the one in which the time information and the serial number information are stored and encrypted) is sent from the management center 31 to the use permitting device 30.
1 is received (4001), the usage permission processing unit 304
Retrieves the key information from the key serial number storage register 306 and decrypts the message 307 by DES7 (400
2). When using the method of digital signature, a digital signature is created from the message.

When the decoded message (time calibration command) is confirmed (4003), the next message 3
The serial number information in 07 is compared with the serial number information read from the key serial number storage register 306. Then, the validity of the message 307 is confirmed only when the serial number information in the message matches the serial number read from the key serial number storage register 306 (4004). At this time, although omitted in the flow of the figure, the serial number information of the key serial number storage register 306 is incremented by "+1".

When the serial number is confirmed in step 4004, the clock 302 is determined based on the time stored in the message.
Is calibrated (4006). Note that the time adjustment message 307 may use an electronic signature instead of being encrypted. When the electronic signature is used instead of the encryption as described above, the usage permission processing unit 304 creates a signature based on the time adjustment message 307 in step 4002, and confirms the signature in step 4003. become.

The date and time information storage register 303 is used to register the expiration date of the software, and when the usage request from the protected software is received, the usage permission processing unit 304 determines the date and time from the clock. When the information is read and the read date and time is a date and time value smaller than that of the date and time information storage register 303, it is recognized that the software is still within the expiration date and the use of the software is permitted. Good.

(Second Embodiment) FIG. 13 is a block diagram showing the functional arrangement of the second embodiment. In the second embodiment, the usage permission processing unit 304 uses the usage key 602 for each software.
(1 to N) are provided, and the usage amount management unit 3 is correspondingly provided.
The credit balance register 607 (1 to N) is provided in 05.

The usage permitting device 301 is provided with a key serial number storage register 606 for storing key information and serial number information. The key serial number storage register 606 includes a secret key and serial number information.

Next, the procedure for setting credits in this embodiment will be described with reference to FIG. First, the secret key and the serial number are preset in the usage permitting device. Next, based on the request from the end user, the management center 31 encrypts the credit value, the usage key, and the serial number information for each software as a credit setting message with the private key and delivers it to the usage permitting device 301 (1101). ). In the use permission device 301, the message is decrypted by the decryption unit DES7 (1102). Here, the usage permission processing unit 304
Checks the decryption state (1103) and, if the decryption is correct, compares the serial number information extracted from the message with the serial number information stored in the key serial number storage register 606. If the serial numbers match, it is determined that the message is valid, and the credit value extracted from the message is set in the credit balance register 607 of the usage amount management unit 305 (110).
5). Then, the value of the key serial number storage register 606 is set to "+
It is incremented by 1 ”(1106).

On the other hand, in step 1103 or 1104, if a decoding error or inconsistency occurs, it is determined that the setting has failed, and the processing is stopped (1107). In addition,
An electronic signature may be used instead of encrypting the credit setting message. The use key setting and the credit setting may be different messages. However, when a signature is used, the usage key needs to be encrypted to keep it secret.

On the other hand, the setting of the credit balance register has been described above, but when the balance value decreases and is updated with a new value, the steps 1101-1 to 110-1 are performed.
The same process as 106 is performed.

Next, at the time of use, after confirming the presence or absence of the use key in response to the use request from the protection software, the credit balance is confirmed, and if there is a balance, the use permission is sent out. FIG. 15 shows a configuration example in which a key clock information storage register 608 is provided instead of the key serial number information storage register 606.

In this example, when it is desired to update the contents of the credit balance register 607 from the management center 31, the credit balance update value and the clock information are concatenated, encrypted as a credit update message, and transmitted to the use permitting device 301. To do. In the use permission device 301, the received credit update message is decrypted by the decryption unit DES7, and the clock information is first read from this update message. This clock information is stored in the key clock information storage register 608.
If it is a value larger than the clock information stored in, the validity of this update message is guaranteed, and the content of the credit balance register 607 is updated with the value read from the message.

(Third Embodiment) FIG. 6 is a block diagram showing the functional arrangement of the third embodiment. The third embodiment also basically realizes the hardware configuration described in FIG. That is, in the third embodiment, the usage amount management unit 305 is the control CPU.
4 and a memory 8, and this usage amount management unit 3
05 includes a secret key 601 and a credit balance register 308.
And are stored.

The use permission processing unit 304 stores a use key 602 (1 to N) for each software, for example. A usage log management unit 603 is also provided, and a usage record 604 (1) corresponding to the usage key 602 (1 to N) is provided.
To N) are stored.

Further, by having a plurality of sets of the above configuration, it becomes possible to deal with a plurality of centers. (Setting of Credit and Secret Key) When the batch totalization method is used for software pay-per-use as in this embodiment, the balance value of the credit balance register 308 is shared by a plurality of software. In order to set such credits, the management center 3 is first requested based on the request from the end user.
1 delivers the credit value and the secret key to the use permission device 301. In the usage permission device 301, the usage amount management unit 305
The private key and the credit balance value are respectively stored in. Next, when the end user uses the software of the software, it is necessary to set the license (usage right). In this collective tabulation method, it is desired to suppress communication with the management center 31 every time the software is used. . Therefore, the license (usage right) is encrypted with the secret key as a use key and distributed in advance with the software. This encrypted use key 605 may be distributed at the same time as the protection software, or may be distributed later in the form of an IC card or a prepaid card.

The encrypted use key 605 is decrypted by the above-mentioned secret key in the decrypting unit (DES7) of the use permitting device 301 and set as the use key 602 in each area of the use permitting unit 304.

The balance value of the credit balance register 308 gradually decreases due to the use of software. However, when resetting this credit, the management center 31
The content of the credit balance register 308 is updated by receiving the credit value from.

FIG. 7 shows this processing flow. That is, in FIG. 7, the usage amount management unit 3 described in FIG.
It is assumed that 05 is provided with a key serial number storage register 306 (see FIG. 5) that stores a secret key 601 and serial number information.

When the credit setting / updating message is received from the management center 31 to the usage permitting device 301 (700
1), the usage permission processing unit 304 reads the secret key 601 stored in the usage amount management unit 305, and decrypts the private key 601.
In S7), the credit setting / update message is decrypted (7002 to 7003).

The credit value and serial number are stored in the credit setting / updating message, and whether or not the decrypted serial number matches the serial number information stored in the key serial number storage register 306. Are compared (7004). If the serial numbers match, the content of the credit balance register 308 is updated with the credit value. Finally, the content of the key serial number storage register 306 is incremented by "+1".

On the other hand, if a decoding error or serial number mismatch occurs in step 7003 or 7004, the setting / update fails and the processing is stopped (7005).

(Fourth Embodiment) FIG. 8 is a block diagram for explaining the function of the fourth embodiment. In the fourth embodiment, in the usage permission device 301, the usage permission processing unit 3 described above is used.
04 and the usage amount management unit 305, in addition to the usage amount integrating meter 8
01 is provided.

This utilization amount integrating meter 801 is used in the memory 8
Is set on. This usage amount integrating meter 801 can clear the integrated value according to an instruction from the management center 31.

Next, a method for purchasing software using the usage amount integrating meter 801 will be described with reference to FIGS. FIG. 10 shows a procedure for purchasing software when the usage amount has reached the maturity.

That is, when the usage amount integration meter clear command is received from the management center 31, the usage permission device 30
1 returns the usage amount integrating meter 801 to the initial value. When the software starts to be used in this state, the usage amount integrating meter 801 counts up according to the usage amount.

When the usage amount of the software reaches the expiration date and the end user issues a meter update request to the management center 31, the management center 31 sends a meter information request command to the usage permission device 301. It

Upon receiving this meter information request command, the usage permitting device 301 transfers the information of the usage amount management unit 305 and the integrated value of the usage amount integrating meter 801 to the management center 31. At this time, it is desirable that the transmitted information be encrypted information in order to maintain security.

When the management center 31 which has received the information recognizes from the information that the software has already reached the expiration of the usage amount, the management center 31 notifies the end user of the expiration. I do. This maturity notification method may be verbally communicated to the end user by the operator through a telephone line,
It may be notified by a register such as mail, or may be displayed on a terminal device (software reproducing device) of the end user by using a communication line.

As a result, when the end user notifies the management center 31 of the purchase request, the management center 31 issues a usage amount integrated value request command to the usage permission device 301. In response to this, the usage permission device 301
The usage amount integrated value is read from the usage amount integrating meter 801 and returned to the management center 31.

After confirming that the management center 31 has reached the maturity again based on the received usage amount integrated value, the management center 31 instructs the usage amount management unit 305 to execute a no-charge command (for purchase Command) to issue.

The usage permitting device 301, which has received the non-charged command, does not perform subsequent subtraction from the credit balance register 308 of the usage amount management unit 305 as far as the software concerned is concerned.

FIG. 11 is a processing sequence when the end user purchases the software before the maturity. As in the case of FIG. 10, when the usage amount integration meter clear command is received from the management center 31, the usage permission device 301
Returns the usage amount integrating meter 801 to the initial value.

When the software starts to be used in this state, the usage amount integrating meter 801 counts up according to the usage amount. If the end user desires to purchase the software before the usage amount integration meter 801 reaches the integration amount indicating the expiration date, the management center 31 sends the usage permission device 301 to the usage permission device 301 based on the purchase request from the end user. Issue the usage amount integrated value request command.

Based on the usage amount integrated value request command, the usage permission device 301 transfers the usage amount integrated value read from the usage amount integration meter 801 to the management center 31. The management center 31 charges the end user an amount obtained by subtracting the usage fee already paid by the user for the usage amount from the sold-out price of the software based on the received usage amount integrated value. At the same time, the management center 31 issues a non-charged command (a command for instructing purchase) to the usage amount management unit 305.

The usage permitting device 301, which has received the non-billing command, does not perform subsequent subtraction from the credit balance register 308 of the usage amount management unit 305 as far as the software concerned is concerned.

FIG. 9 is a block diagram showing a mechanism for setting a threshold value by the usage permitting device 301 itself so as not to charge for usage exceeding the threshold value. That is, in FIG. 9, the sold-out change value storage register 80
2 is prepared, and the value to this register can be updated by a command from the management center 31.

FIG. 12 shows this processing sequence. That is, first, the management center 31 causes the use permission device 3
To 01, the usage amount integration meter clear command and the threshold value setting command are sent. Upon receipt of this, the usage permitting device 301 clears the usage amount integrating meter 801, and sets a new threshold value, that is, a modified value in the sold-out modified value storage register 802.

In this state, the usage amount integrating meter 801 counts up the stored value according to the usage amount of software. Here, the stored value of the usage amount integrating meter 801 is constantly compared with the value set in the sold-out change value storage register 802.

If the count value of the usage amount integrating meter 801 is equal to or exceeds the value stored in the sold-out change value storage register 802, the usage permission processing unit 30
Reference numeral 4 instructs the usage amount management unit 305 not to perform subsequent subtraction from the credit balance register 308.

[0105]

As described above, according to the present invention, it is possible to specifically realize the pay-per-use billing of software by the number of days management or the time management. Further, since the software use license can be given without communicating with the center, it becomes easy to collectively collect the pay-per-use charges.

[Brief description of drawings]

FIG. 1 is a typical functional block diagram of the present invention.

FIG. 2 is a block diagram showing a configuration of a software reproduction device of the present invention.

FIG. 3 is a flowchart showing a usage permission procedure of the first embodiment.

FIG. 4 is a flow chart showing a time calibration procedure of the first embodiment.

FIG. 5 is a functional block diagram showing the configuration of the first embodiment.

FIG. 6 is a functional block diagram showing the configuration of the third embodiment.

FIG. 7 is a flowchart showing a credit setting procedure according to the third embodiment.

FIG. 8 is a functional block diagram showing the configuration of the fourth embodiment.

FIG. 9 is a functional block diagram showing a modification of the configuration of the fourth embodiment.

FIG. 10 is a sequence diagram showing a procedure for purchasing software when the usage amount has expired in the fourth embodiment.

FIG. 11 is a sequence diagram showing processing when an end user desires to purchase software during use in the fourth embodiment.

FIG. 12 is a sequence diagram showing a process when a purchase process is performed in the usage permit device in the fourth embodiment.

FIG. 13 is a functional block diagram showing the configuration of the second embodiment.

FIG. 14 is a flowchart showing a credit setting procedure in the second embodiment.

FIG. 15 is a functional block diagram showing a modified example of the configuration of the second embodiment.

[Explanation of symbols]

2. decoder 3. SD circuit 4. Control CPU 7. Decryption unit (DES) 8. memory 10. Control CPU 13. Demultiplexer 31. Management center 102. Software management module 103. Decryption unit 104. Input section 105. Software playback device 108. Permission control 109. Output section 301. Usage permission device 302. clock 303. Date and time information storage register 304. Usage permission processing unit 305. Usage management department 306. Key serial number storage register 307. Time adjustment message 308. Credit balance register 601. Private key 602. Usage key 603. Usage log management department 604. Usage record 605. Encryption usage key 606. Key serial number storage register 607. Credit balance register 608. Key clock information storage register 801. Usage meter 802. Out-of-stock change value storage register

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Noboru Iwayama             4-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa             No. 1 within Fujitsu Limited (72) Inventor Masahiko Takenaka             4-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa             No. 1 within Fujitsu Limited (72) Inventor Masahiro Matsuda             4-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa             No. 1 within Fujitsu Limited F term (reference) 5B076 FA16 FB05 FB11 FB17 FC01                       FC10

Claims (11)

[Claims] 1. A device for permitting the use of software and a permission device for charging according to the use of the software, wherein a clock for obtaining date and time information and date and time information obtained at the start of using the software Date and time information storage means for storing information until the time of acquisition of the information, and monitoring the use of the software, the date and time used is a difference of a certain time or more from the date and time information stored in the date and time information storage means. And a determining unit that determines whether or not there is a unit, and a unit that counts the usage amount of the software as an object of billing when the determining unit has a difference of a certain time or more. Authorization device. 2. The usage permission apparatus according to claim 1, wherein the date and time information storage means is provided for each software to be used. 3. The use permission apparatus according to claim 1, further comprising a management center that manages the use permission apparatus, wherein the clock calibration is executed only by a time calibration command from the management center. 4. The use-permitted device is provided with key storage means for storing device-specific key information and non-repeated number storage means for storing a non-repeated number for preventing reuse of commands. Means for connecting the non-repeating number to the time calibration command to receive a message encrypted by the key information; and the time calibration using the key information read from the received message from the key storage means. Means for decoding the command and the non-repeating number, comparing the received non-repeating number with the value stored in the non-repeating number storing means, and the time calibration received only when the result of the comparison is correct. 4. The usage authorization device according to claim 3, wherein the timepiece is calibrated based on a command. 5. A management center that manages the use permission device, wherein the use permission device has a use key information storage unit for storing use key information necessary for permission to use the software, The set credit balance is provided / stored with a credit balance storage means for setting / updating by a credit balance setting command from the management center. The management center provides a credit balance storage unit for a software provider when the usage balance is set. The use permission device according to claim 1, wherein the use permission device is capable of counting. 6. The use permission apparatus according to claim 5, wherein the setting of the use key is performed simultaneously with the setting of the credit balance. 7. The usage permitting device is provided with a key storing means for storing device-specific key information and a non-repeating number storing means for storing a non-repeating number for preventing reuse of commands, Means for receiving the message encrypted by the key information by concatenating the non-repeating number with the credit balance setting command; and the credit using the key information read from the key storage means for the received message. Means for decoding the balance setting command and the non-repeating number, comparing the received non-repeating number with the value stored in the non-repeating number storing means, and the means for receiving only when the result of the comparison is correct. 7. The use according to claim 5, wherein the credit balance is set in the credit balance storage means based on a credit balance setting command. Yes apparatus. 8. A permitting device for permitting the use of software and a fee-charging device for charging according to the use of the software, and a management center for managing the permitting device, the software being set for each software. A usage amount accumulator unit that stores the accumulated amount that counts the usage amount, and an end user unit that stores the usage amount accumulator unit when the end user desires to change the usage of software from pay-per-use to sold-out Means for notifying the management center of the accumulated amount of software, means for receiving a non-charged command from the management center for instructing purchase, and when the non-charged command is received, the software is charged. A usage permitting device comprising: means for disabling. 9. The usage amount integrator means is provided with a method change value storage means for registering an integrated value which is a threshold value for changing from the pay-per-use method to the sold-out method of the software, and the integrated amount is a method. 9. The method of changing the method from pay-per-use to sold-out only within the usage permitting device when the accumulated value registered in the changed value storage means is exceeded.
Use permission device described. 10. The use according to claim 4, wherein a serial number is used as the non-repeating number, and the serial number is updated when the result of comparing the serial numbers is correct. Authorization device. 11. The use permission apparatus according to claim 10, wherein the management center manages the serial number so that the management center is not notified of the serial number before sending a command.